Windows 10: How to use Defender Endpoint to find versions of SSL and TLS on the network

I'd like to use Defender Endpoint to identify all open SSL and TLS ports, and the versions of SSL and TLS on them. Can that be done with a Kusto query? If so, what is the query? I've been looking in the query interface itself, plus Github and web searches and can't find anything.Thanks

:)

 

TLS AND SSL

WOULD YOU KINDLY ADVISE ME IF THE FOLLOWING SHOULD BE ENABLED ON MY COMPUTER SSL 2.0, SSL 3.0 TLS 1.0 TLS 1.1 TLS 1.2.

 

TLS AND SSL

TLS 1.0 TLS 1.1 TLS 1.2 should be enabled not SSL 2.0 or 3.0 as there are security vuls for SSL 2.0 / 3.0 which can be exploited.

There is also a security advisory from Microsoft for SSL 3.0 - Vulnerability in SSL 3.0 Could Allow Information Disclosure -

https://docs.microsoft.com/en-us/security-updat...

 

Microsoft Edge TLS Security

After trying everything (not a lot of steps) listed in the Microsoft Edge support site, I did a wider search and found this very simple youtube video that fixed it immediately:

For those who prefer not to click links the steps are simple:

1. Click in the Cortana search bar next to the Win 10 Start button

2. Type internet options

3. Select internet options (control panel) from the list

4. Click on the advanced tab

5. Scroll down to the security section

6. Make sure the following are all clicked:
Use SSL 3.0
Use TLS 1.0
Use TLS 1.1
Use TLS 1.2

7. Click apply

8. Refresh the page that was giving the error and it should now connect.

Hope this helps, it was a 30 second fix after hours of pounding my head against the error with the Support site suggestions.